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DETAILED ACTION 



The application of Beenau et al. for a "method and system for keystroke recognition 
biometrics on a fob" filed March 26, 2004 has been examined. 

This application is a CIP of 10/340,352 filed January 10, 2003, which is a CIP of 
10/192,488 filed July 9, 2002, which claims the benefit of 60/304,216 filed July 10, 2001 and 
said 10/340,352 filed January 10, 2003, which is a CIP of 10/318,432 filed December 13, 2002 
and is a CIP of 10/318,480 filed December 13, 2002, and claims benefit of 60/396,577 filed July 
16, 2002. 

Claims 1-46 are pending. 

Specification 



Applicant is reminded of the proper language and format for an abstract of the disclosure. 

The abstract should be in narrative form and generally limited to a single paragraph on a 
separate sheet within the range of 50 to 1 50 words. It is important that the abstract not exceed 
150 words in length since the space provided for the abstract on the computer tape used by the 
printer is limited. The form and legal phraseology often used in patent claims, such as "means" 
and "said," should be avoided. The abstract should describe the disclosure sufficiently to assist 
readers in deciding whether there is a need for consulting the full patent text for details. 

The language should be clear and concise and should not repeat information given in the 
title. It should avoid using phrases which can be implied, such as, "The disclosure concerns," 
"The disclosure defined by this invention," "The disclosure describes," etc. 



The current abstract using phrase "the present invention" and "the invention" is implied 
and should be avoided. See MPEP 608.01(b). 
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Claim Rejections - 35 USC § 112 
The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

Claims 1-46 are rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which applicant regards as 
the invention. 

In claim 1, the phrase "said system comprising:" is confusing and unclear. It is not 
understood what is meant by such a Umitation. Is the system a transponder-reader transaction 
system or a biometric security system? What are the different between a system, a transponder- 
reader transaction system and a biometric security system? Claims 2-9 are rejected for their 
dependence on Claim 1 and include the same limitations of Claim 1 without correcting the 
ambiguity. 

In claim 1, the phrase "a device configured to verify said proffered keystroke scan sample 
to facilitate a transaction" is confusing and unclear. It is not understood what is meant by such a 
limitation. What is a device? Is a device in a reader or in a transponder or in a keystroke scan 
sensor? Where is this limitation supported by specification? 

In claim 3, the phrase "wherein said keystroke scan sensor is configured to facilitate a 
finite number of scans" is confusing and unclear. It is not understood what is meant by such a 
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limitation. What facilitate a finite number of scan mean? What is a finite number? Where is 
this limitation supported by specification? 

Claim 7 recites the limitation "remote database" in line 2. There is insufficient 
antecedent basis for this limitation in the claim. Also the phrase "wherein said remote database is 
configured to be operated by an authorized sample receiver" is confusing and unclear. It is not 
understood what is meant by such a limitation. What exactly is an authorized sample receiver? 
Is an authorized sample receiver of a reader or an authorized user? Where is this limitation 
supported by specification? 

In claim 16, the phrase "wherein a keystroke scan sample is primarily associated with at 
least one of first user information,. . and wherein a keystroke scan sample is secondarily 
associated with at least one of second user information" is confusing and unclear. It is not 
understood what is meant by such a limitation. What is the different between primarily and 
secondarily? What is a user information? What is a first and second information? Is primarily 
and secondarily includes the same or identical personal information? Where is this limitation 
supported by specification? 

In claim 1 7, the phrase "configured to begin mutual authentication upon verification of 
said proffered keystroke scan sample" is confusing and unclear. It is not understood what is 
meant by such a limitation. What is configuring to begin mutual authentication? Is the reader 
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authenticated the transponder, vice versa or both? Where is. this limitation supported by 
specification? 

In claims 20-2 1 , the phrase "wherein said device configured to verify is configured to 
facilitate the use of at least one secondary security procedure" is confusing and unclear. It is not 
understood what is meant by such a limitation. What is the device do? Is the device verify or 
configure? Where is this limitation supported by specification? 

In claim 22 and 34, the phrase "detecting a proffered biometric at a sensor 
communicating with said system to obtain a proffered biometric sample" is confusing and 
unclear. It is not understood what is meant by such a limitation. Is a sensor detecting a proffered 
biometric sample? Is the sensor locate in the transponder, in a reader or in a system? What is the 
different between a proffered biometric and a proffered biometric sample? Where is this 
limitation supported by specification? Claims 22-33 and 36-46 are rejected for their dependence 
on Claims 22 and 34 and include the same limitations of Claims 22 and 34 without correcting the 
ambiguity. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 



t 
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Claims 1-46 are rejected under 35 U.S.C. 103(a) as being unpatentable over Kita (US# 
6,703,918) in view of BoUe et al. (US# 6,819,219). 

Referring to claims 1, 22 and 34, Kita discloses a method and a transponder-reader 
transaction system (i.e. an authentication system) (see Figures 3, 10-1 1, 14-15, 20 and 24-25) 
configured with a biometric security system (1) (i.e. a portable information equipment), said 
system comprising: 

a transponder (171) (i.e. a portable information equipment) configured to communicate 
with a reader (191) (i.e. authentication device) (colunrn 10 line 63 to column 12 line 67; see 
Figure 10-1 1); a reader (191) (i.e. authentication device) configured to conununicate with said 
system (197) (i.e. system or server) (column 12 line 6 to 67; see Figure 1 1); a biometric sensor (8 
or 10) configured to detect a proffered biometric scan sample (i.e. authentication data), said 
biometric scan sensor (8 or 10) configured to communicate with said system (197) (i.e. system or 
server); and a device (152) (i.e. a control circuit) configured to verify said proffered biometric 
scan sample (i.e. authentication data) to facilitate a transaction (column 19 line 48 o 67; see 
Figures 24-25). 

However, Kita did not explicitly disclose a keystroke scan sensor configure to detect a 
proffered keystroke scan sample. 

In the same field of endeavor of biometric identity verification system, BoUe et al. teach 
that a keystroke scan sensor (904) (i.e. a keystroke pattern) configure to detect a proffered 



Application/Control Number: 10/708,834 Page 7 

Art Unit: 2635 

keystroke scan sample (i.e. keystroke pattern properties) (column 7 lines 14 to 26; see Figures 1- 
1 1) in order to identify the identity of a person using the biometric means for access control. 

One of ordinary skilled in the art recognizes using keystroke pattems in a wireless 
portable conmiunications device taught by BoUe et al. in a portable information equipment of 
Kita because Kita suggests it is desired to provide that the portable information equipment 
includes plurality of biometric sensors to authenticate the user (colunm 10 line 62 to colvmin 12 
line 40; column 14 lines 42 to 61; see Figures 10-15) and BoUe et al. teach that the wireless 
portable communication device includes a plurality of biometric sensors including a keystroke 
pattems to identify the user in the identity verification system in order to increase security for 
access control. Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of the invention was made to using a keystroke pattems in a wireless portable 
communications device taught by BoUe et al. in a portable information equipment of Kita with 
the motivation for doing so would have been to secure the verification of the user in the identity 
verification system for e-commerce. 

Referring to Claims 2 and 35, Kita in view of BoUe et al. disclose the method and the 
transponder-reader transaction system of claims land 34, Kita discloses wherein said sensor 
(155) (i.e. organic measurement sensor) is configured to communicate with said system (197) via 
at least one of a transponder (171) (column 12 line 6 to 40; see Figures 10-15) 

Referring to Claims 3 and 38, Kita in view of BoUe et al. disclose the method and the 
transponder-reader transaction system of claims land 34, Kita discloses wherein said keystroke 
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scan sensor (176) is configured to facilitate a finite number of scans (column 4 line 20 to column 
5 line 9; column 10 line 62 to column 1 1 line 61; see Figures 1-3 and 10-15). 

Referring to Claims 4 and 39, Kita in view of BoUe et al. disclose the method and the 

transponder-reader transaction system of claims 1 and 34, Kita discloses wherein said keystroke 
scan sensor (176) is configured to log at least one of a detected keystroke scan sample, processed 
keystroke scan sample and stored keystroke scan sample (column 5 lines 55 to column 6 line 43; 
column 9 line 66 to column 10 line 13). 

Referring to Claim 5, Kita in view of BoUe et al. disclose the transponder-reader 
transaction system of claim 1, Kita discloses further including a database (154) (i.e. organic 
authentication registration data) configured to store at least one data packet (i.e. authentication 
data), wherein said data packet (i.e. authentication data) includes at least one of proffered and 
registered keystroke scan samples, proffered and registered user information, terrorist 
information, and criminal information (column 10 line 62 to column 1 1 line 14; column 12 line 6 
to 67; see Figures 10-15). 

Referring to Claim 6, Kita in view of BoUe et al. disclose the transponder-reader 
transaction system of claim 5, Kita discloses wherein said database (154) (i.e. organic 
authentication registration data) is contained in at least one of the transponder (151), transponder 
reader, sensor, remote server, merchant server and transponder-reader system (column 1 0 line 62 
to column 1 1 line 14; column 12 line 6 to 67; see Figures 10-15). 
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Referring to Claim 7, Kita in view of Bolie et al. disclose the transponder-reader 
transaction system of claim 5, Kita discloses wherein said remote database (154) (i.e. organic 
authentication registration data) is configured to be operated by an authorized sample receiver 
(356) (i.e. a radio transmission/reception) (column 10 line 62 to column 1 1 line 14; colimm 16 
lines 42 to column 17 line 39; see Figures 10-15 and 20). 

Referring to Claims 8 and 36, Kita in view of BoUe et al. disclose the method and the 
transponder-reader transaction system of claims land 34, BoUe et al. disclose wherein said 
keystroke scan sensor device (904) (i.e. keystroke pattem) is configured with at least one of 
electronic sensor (column 6 Unes 15 to 42; column 7 lines 14 to 26; see Figures 6 to 11). 

Referring to Claims 9, 30 and 43, Kita in view of BoUe et al. disclose the method and the 
transponder-reader transaction system of claims 1, 28 and 34, BoUe et al. disclose wherein said 
keystroke scan sensor (904) is configured to detect and verify keystroke scan characteristics 
including at least one behavioral, temporal and physical characteristics (column 7 lines 14 to 26; 
see Figures 6 to 11). 

Referring to claims 10, 31, and 41, Kita in view of BoUe et al. disclose the method for of 
claims 1, 22, and 34, BoUe et al. discloses wherein said step of proffering a keystroke scan to a 
keystroke scan sensor communicating with said system further comprises using said keystroke 
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scan sensor (904) to detect false keystrokes and body heat (column 6 lines 15 to 42; column 7 
lines 14 to 58; see Figures 6 to 1 1). 

Referring to Claims 1 1, 42 and 44, Kita in view of BoUe et al. disclose the transponder- 
reader transaction system of claims 1 and 34, Kita discloses further including a device (152) (i.e. 
a control circuit) configured to compare a proffered keystroke scan sample (i.e. organic data 
input) with a stored keystroke scan sample (178) (i.e. registered biometric data) (column 12 lines 
6 to 67; see Figure 15). 

Referring to Claims 12 and 46, Kita in view of BoUe et al. disclose the transponder- 
reader transaction system of claims 1 1 and 34, Kita discloses wherein said device (152) (i.e. a 
control circuit) configured to compare a keystroke scan sample (i.e. authentication data) is at 
least one of a third-party security vendor device and protocol/sequence controller (column 12 
lines 6 to 67; see Figvire 15). 

Referring to Claim 13, Kita in view of BoUe et al. disclose the transponder-reader 
transaction system of claim 1 1 , Kita discloses wherein a stored keystroke scan sample comprises 
a registered keystroke scan sample (column 12 lines 6 to 67; see Figure 15). 

Referring to Claim 14, Kita in view of Bolle et al. disclose the transponder-reader 
transaction system of claim 13, Kita discloses wherein said registered keystroke scan sample 
(178) (i.e. registered biometric data) is associated with at least one of: personal information, 
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credit card information, debit card information, savings account information, and loyalty point 
information (column 19 line 47 to 67; see Figure 25). 

Referring to Claim 15, Kita in view of BoUe et al. disclose the transponder-reader 
transaction system of claim 14, Kita discloses wherein different registered keystroke scan 
samples are associated with a different one of: personal information, credit card information, 
debit card information, savings account information, and loyalty point information (colunm 1 9 
line 47 to 67; see Figure 25). 

Referring to Claim 16, Kita in view of Bolle et al. disclose the transponder-reader 
transaction system of claim 14, Kita discloses wherein a keystroke scan sample (i.e. 
authentication data) is primarily associated with at least one of first user information (i.e. first 
authentication registration input) wherein said first information comprises personal information, 
credit card information, debit card information, savings account information, and loyalty point 
information, and wherein a keystroke scan sample is secondarily associated with at least one of 
second user information (i.e. first authentication registration input), wherein said second 
information comprises personal information, credit card information, debit card information, 
savings account information, and loyalty point information, where second user information is 
different than first user information (column 9 line 49 to column 10 line 13; column 19 line 48 to 
67; see Figures 9 and 25). 
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Referring to Claim 17, Kita in view of BoUe et al. disclose the transponder-reader 
transaction system of claim 1 , Kita discloses wherein said transponder-reader transaction system 
is configured to begin mutual authentication upon verification of said proffered keystroke scan 
sample (column 16 lines 47 to column 17 line 25; see Figure 25). 

Referring to Claim 18, Kita in view of Bolle et al. disclose the transponder-reader 
transaction system of claim 1, Kita discloses wherein said transponder is configured to deactivate 
(i.e. end the process of verification) upon rejection (i.e. not coincident) of said proffered 
keystroke scan sample (column 7 line 53 to column 8 line 23; see Figures 6-8. 

Referring to Claim 19, Kita in view of Bolle et al. disclose the transponder-reader 
transaction system of claim 1 , Kita discloses wherein said sensor is configured to provide a 
notification upon detection of a sample (column 5 line 40 to column 6 line 23; see Figure 5). 

Referring to Claim 20, Kita in view of Bolle et al. disclose the transponder-reader 
transaction system of claim 1 , Kita discloses wherein said device configured to verify is 
configured to facilitate at least one of access, activation of a device, a financial transaction, and a 
non-financial transaction (column 19 line 48 to 67; see Figure 25). 

Referring to Claim 21, Kita in view of Bolle et al. disclose the transponder-reader 
transaction system of claim 1 , Kita discloses wherein said device configured to verify is 
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configured to facilitate the use of at least one secondary security procedure (column 19 line 48 to 
67; see Figure 25). 

Referring to claim 23, Kita in view of BoUe et al. disclose the method for of claim 22, 
Kita discloses further comprising registering at least one keystroke scan sample (i.e. 
authentication data) with an authorized sample receiver (8) (column 9 line 66 to column 10 line 
59; column 1 1 line 15 to 61; see Figures 10-1 1). 

Referring to claim 24, Kita in view of BoUe et al. disclose the method for of claim 23, 
Kita discloses wherein said step of registering further includes at least one of: contacting said 
authorized sample receiver (32) (i.e. a wireless transmission reception section), proffering a 
keystroke scan to said authorized sample receiver (32), processing said keystroke scan to obtain 
a keystroke scan sample (i.e. authentication data), associating said keystroke scan sample (i.e. 
authentication data) with user information, verifying said keystroke scan sample (i.e. 
authentication data), and storing said keystroke scan sample upon verification (column 9 lines 66 
to column 10 line 59; column 1 1 line 15 to 61; see Figures 10-11). 

Referring to claim 25, Kita in view of BoUe et al. disclose the method for of claim 22, 
BoUe et al. discloses wherein said step of proffering includes proffering a keystroke scan to at 
least one of an electronic sensor, an optical sensor and a keyboard (column 6 lines 15 to 42; 
column 7 lines 14 to 26; see Figures 6 to 11). 
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Referring to claims 26 and 37, Kita in view of BoUe et al. disclose the method for of 
claims 22 and 34, Kita discloses wherein said step of proffering further includes proffering a 
biometric (i.e. fingerprint) to a biometric sensor (8) communicating with said system to initiate at 
least one of: storing, comparing, and verifying said biometric sample (i.e. authentication data) 
(column 9 lines 66 to column 10 line 59; colunm 1 1 line 15 to 61; see Figures 10-11). 

Referring to claim 27, Kita in view of BoUe et al. disclose the method for of claim 22, 
Kita discloses wherein said step of proffering a keystroke scan to a keystroke scan sensor (8) 
communicating with said system to initiate verification further includes processing database 
information (i.e. authorized data in an organic authentication registration data), wherein said 
database information (registration data) is contained in at least one of a transponder (151) (i.e. a 
equipment) (column 10 line 63 to column 1 1 line 61; see Figures 10-11). 

Referring to claim 28, Kita in view of BoUe et al. disclose the method for of claim 22, 
Kita discloses wherein said step of proffering a keystroke scan to a keystroke scan sensor (8) 
communicating with said system to initiate verification further includes comparing a proffered 
biometric sample (i.e. authentication data) with a stored biometric sample (i.e. organic 
authentication registration data registered in the organic authentication registration data unit 1 54) 
(column 1 1 line 42 to 61; see Figures 10-11). 

Referring to claim 29, Kita in view of Bolle et aL disclose the method for of claim 28, 
Kita discloses wherein said step of comparing includes comparing a proffered biometric sample 
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(i.e. authentication data) to a stored biometric sample (i.e. registration data) by using at least one 
of a third-party security vendor device (37) (i.e. service business) and protocol/sequence 
controller ((152) (i.e. a control circuit) (column 5 line 40 to column 7 line 52; colunm 10 line 62 
to column 1 1 line 67; see Figure 1-7 and 10-11). 

Referring to claims 32 and 42, Kita in view of Black disclose the method for of claim 22 
and 34, Kita discloses wherein said step of proffering a biometric to a biometric sensor 
communicating with said system to initiate verification further includes at least one of detecting, 
processing and storing at least one second proffered biometric sample (i.e. authentication data) 
(column 9 line 66 to column 10 line 36). 

Referring to claim 33, Kita in view of Black disclose the method for of claim 22, Kita 
discloses wherein said step of proffering a biometric to a biometric sensor communicating with 
said system to initiate verification further includes the use of at least one secondary security 
procedure (i.e. second authentication input section) (column 10 line 50 to 60; column 1 1 line 42 
to column 12 line 4; see Figures 9-11). 

Referring to claim 45, Kita in view of Black disclose the method for of claim 34, Kita 
discloses wherein said step of verifying includes verifying a proffered biometric sample using 
information contained on at least one of a local database (i.e. an organic authentication 
registration data at the equipment 154) (column 1 1 line 42 to 61 ; see Figure 10). 
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Double Patenting 

The nonstatutory double patenting rejection is based on a judicially created doctrine 
grounded in public policy (a policy reflected in the statute) so as to prevent the unjustified or 
improper time wise extension of the "right to exclude" granted by a patent and to prevent possible 
harassment by multiple assignees. A nonstatutory obviousness-type double patenting rejection is 
appropriate where the conflicting claims are not identical, but at least one examined application 
claim is not patentably distinct from the reference claim(s) because the examined application 
claim is either anticipated by, or would have been obvious over, the reference claim(s). See, e.g., 
In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 1 1 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re 
Van Omum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 
619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) may 
be used to overcome an actual or provisional rejection based on a nonstatutory double patenting 
ground provided the conflicting application or patent either is shown to be commonly owned 
with this application, or claims an invention made as a result of activities undertaken within the 
scope of a joint research agreement. 

Effective January 1, 1994, a registered attomey or agent of record may sign a terminal 
disclaimer. A terminal disclaimer signed by the assignee must fully comply with 37 CFR 
3.73(b). 

Claims 1-46 are provisionally rejected on the ground of nonstatutory obviousness-type 
double patenting as being unpatentable over claims 1-47 of copending Application No. 
10/708,836 in view of BoUe et al. (US# 6,819,219). 

This is a provisional obviousness-type double patenting rejection. 



Referring to claims 1-46, copending Application NO. 10/708,836 claims a transponder- 
reader transaction system which is the same as of claims 1-46 of Application NO. 10/708,834, 
however, copending Application NO. 10/708,836 did not explicitly claim include a keystroke 
scan sensor. 

In the same field of endeavor of biometric identity verification system, BoUe et al. teach 
that a keystroke scan sensor (904) (i.e. a keystroke pattern) configure to detect a proffered 
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keystroke scan sample (i.e. keystroke pattern properties) (colunm 7 lines 14 to 26; see Figures 1- 
1 1) in order to identify the identity of a person using the biometric means for access control. 

One of ordinary skilled in the art recognizes using a biometric keystroke pattern for 
authentication taught by BoUe et al. in the transponder-reader transaction system of a copending 
Application No. 10/708,836 because a copending Application No. 10/708,836 suggests to use a 
facial sensor (paragraph 0151 to paragraph 0154) and Bolle et al. suggests it is desired to use an 
keystroke scan sensor or any other alternative biometric sensors in a biometric identification 
process (column 7 lines 14 to 26; see Figure 9) in order to increase security for access control. 
Therefore, it would have been obvious to a person of ordinary skill in the art at the time of the 
invention was made to use a biometric keystroke pattern for authentication taught by Bolle et al. 
in the transponder-reader transaction system of a copending Application No. 10/708,836 with the 
motivation for doing so would have been to have an altemative type of a biometric sensor in an 
identification transaction system. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Price-Francis (US# 5,815,252) discloses a biometric identification process and system 
utilizing multiple parameters scans for reduction of false negatives. 

Smyth (US# 6,120,461) discloses an apparatus for tracking the human eye v^th retinal 
scanning display, and method thereof 



Application/Control Number: 10/708,834 



Page 18 



Art Unit: 2635 

Pare, Jr. et al. (US# 6,269,348) disclose a tokenless biometric electronic debit and credit 
transactions. 

Black (US# 6,307,956) discloses a writing implement for identity verification system. 
Prokoski (US# 6,496,594) discloses a method and apparatus for aligning and comparing 
images of the face and body from different images. 



Any inquiry concerning this communication or earlier communications fi"om the 
examiner should be directed to Nam V Nguyen whose telephone number is 571-272-3061. The 
examiner can normally be reached on Mon-Fri, 8:30AM - 5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Michael Horabik can be reached on 571-272-3068. The fax phone numbers for the 
organization where this application or proceeding is assigned are 571-273-8300 for regular 
conmiunications. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http ://pair-direct.usDto . gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toU-fi-ee). 
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